Description

You will architect and secure automated CI/CD pipelines to embed security controls throughout the software development lifecycle.

Responsibilities

• Assess the architecture, controls, and deployments of secure CI/CD pipelines.
• Evaluate and integrate security tools and automation into existing development workflows.
• Collaborate with development, operations, and security teams to implement security best practices.
• Develop strategies to modernize pipelines and remove manual security processes.
• Review the effectiveness of secure coding practices and remediation efforts.

Required Skills

• 5+ years of experience in security engineering or designing and securing DevOps pipelines.
• Expertise in CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.
• Deep knowledge of security tools including SAST, DAST, SCA, and secrets management.
• Hands-on experience with cloud platforms (AWS, Azure, GCP) and their security services.
• Proficiency in containerization and orchestration using Docker and Kubernetes.
• Experience with Infrastructure as Code (IaC) tools like Terraform, Ansible, or CloudFormation.
• Strong understanding of SDLC, secure coding practices, and OWASP Top 10 vulnerabilities.
• Working knowledge of branching strategies and development lifecycle management.
• Scripting proficiency in Python, Bash, or PowerShell.
• Familiarity with compliance frameworks such as NIST, ISO 27001, or SOC 2.

Preferred Skills

• CISSP, CCSK, or equivalent security certifications.
• Cloud-specific certifications in Security or DevOps for Azure, AWS, or GCP.

Key Skills

Education

Any Gradute